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DETAILED ACTION 

1 . This Office Action is the answer to the communication filed on September 7, 
2000, and the Preliminary Amendment filed in November 26, 2001, which papers have 
been placed of record in the file. 

2. Claims 1-38 are pending in this application. 



Claim Objections 

3. Claims 8, 14, 23, 31 , 36 are objected to under 37 CFR 1 .75 as being a 
substantial duplicate of claims 6, 12, 19, 25, 28, respectively. When two claims in an 
application are duplicates or else are so close in content that they both cover the same 
thing, despite a slight difference in wording, it is proper after allowing one claim to object 
to the other as being a substantial duplicate of the allowed claim. See MPEP 
§ 706.03(k). 



Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 
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5. Claims 1-4, 6, 8, 10-15, 17, 19, 21-26, 28, 30-32, 34, 36, and 38 are rejected 
under 35 U.S.C. 102(e) as being anticipated by Gottfried, U.S. Patent No. 6,270,011. 

Regarding to claim 1 , Gottfried discloses a method of authorizing purchase 
transactions over a computer network using an account number that identifies a 
consumer's account from which funds will be withdrawn to pay a purchase price an 
authorization token associated with the account number which, when used with the 
account number, enables withdraw of funds from the account, the method comprising 
the steps: 

transmitting the account number electronically over the network from the a 
consumer location to an on-line merchant location(column 8, lines 10-15, column 6, 
lines 16-20, user uses user PC to send credit card information include credit card 
number to the store server); 

forwarding the account number electronically over the network from the on-line 
merchant location to a third party contractor location (column 8, lines 10-15, column 6, 
lines 16-20, the store server transfers the information includes the credit card number to 
the credit card company database server); 

determining at the third party contractor location an authentication token type 
associated with the account number (column 9, lines 7-1 1 , the credit card company data 
base sends a request to the user PC to request the fingerprint data related to the user 
making the purchase transaction; column 6, 16-20, credit card information include credit 
card number; column 7, lines 5-10, the credit card company data base store the 
fingerprint data associated with the credit card information, thus by requesting the 
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fingerprint data from the user, the credit card company data base determines that the 
user has a fingerprint data type associated with the credit card number); 

prompting a consumer at the consumer location to electronically transmit an 
authentication token in accordance with the determined authentication token type over 
network to the third party contractor location (column 9, lines 7-18, prompting the user 
PC to transmit the fingerprint data to the credit card company database); 

transmitting the authentication token electronically over the network from the 
consumer location to the third party contractor location(column 9, lines 14-17, the user 
PC sends the encrypted fingerprint data information to the credit card company 
database, the authentication token is defined as a symbol or evidence of authority, 
validity of identity, thus the fingerprint data information is equivalent to the 
authentication token); and 

determining at the third party contractor location whether the account number and 
the authentication token are valid and, if so, then authorizing the purchase transaction 
to proceed (column 9, lines 18-26, the credit card company database compares the 
fingerprint data received from the user PC with the data base in order to approves or 
deny the transaction). 

Regarding to claims 2, 13, Gottfried discloses the on-line merchant location is 
bypassed when the authentication token is transmitted over the network from the 
consumer location to the third party contractor location (column 9, lines 7-17, the 
authentication token is transmitted from the consumer location to the third party 
contractor location, the on-line merchant does not receive the authentication token). 
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Regarding to claims 3, 12, 14, Gottfried discloses the account number and the 
authentication token are transmitted over the network via encrypted connections 
(column 9, lines 30-40). 

Regarding to claims 4, 17, 24, 26, 32, 34, Gottfried discloses the network is the 
Internet and wherein the number is electronically transmitted from the on-line merchant 
location to the third party contractor location over the Internet, over a direct connection 
(column 9, lines 1-7, Internet is considered equivalent to a direct connection because 
the credit card data base communicates directly with the merchant through the Internet). 

Regarding to claims 6, 8, 15, 22, 28, 36, Gottfried discloses electronically 
transmitting a signal over the network from the third party contractor location to the on- 
line merchant location indicating whether the account number and authorization token 
are valid (column 9, lines 18-25). 

Regarding to claim 10, Gottfried discloses a system for making purchases over a 
computer network using an account number that identifies a consumer's account from 
which funds will be withdrawn to pay a purchase price an authorization token associated 
with the account number which, when used with the account number, enables withdraw 
of funds from the account, the system comprising: 

a first computer at a consumer location, the first computer being connected to the 
network (figure 5, item 50, user PC); 

a second computer at an on-line merchant location, the second computer being 
connected to the network (figure 5, item 52, store server); and 
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a third computer at a third party contractor location, the third computer being 
connected to the network (figure 5, item 54, credit card company data base server); 

the first computer being configured to transmit the account number over the 
network to the second computer (column 8, lines 10-15, column 6, lines 16-20, user 
uses user PC to send credit card information include credit card number to the store 
server) and transmit the authentication token over the network to the third computer 
(column 9, lines 14-17, the user PC sends the encrypted fingerprint data information to 
the credit card company database, the authentication token is defined as a symbol or 
evidence of authority, validity of identity, thus the fingerprint data information is 
equivalent to the authentication token); 

the second computer being configured to forward the account number received 
from the first computer over the network to the third computer (column 8, lines 10-15, 
column 6, lines 16-20, the store server transfers the information includes the credit card 
number to the credit card company database server); and 

the third computer being configured to determine an authentication token type 
associated with the account number receive from the second computer, prompt the first 
computer to transmit an authentication token in accordance with the determined 
authentication token type (column 9, lines 7-18, prompting the user PC to transmit the 
fingerprint data to the credit card company database), and determine whether the 
account number and the authentication token are valid, and if so, then authorizing the 
purchase to be made (column 9, lines 18-26, the credit card company database 
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compares the fingerprint data received from the user PC with the data base in order to 
approves or deny the transaction). 

Regarding to claims 1 1 , 30, 38, Gottfried discloses the authentication token type is 
at least one of a personal identification number, a biometric signature, an authorization 
code stored on a smart card, or a password (column 9, lines 7-17, fingerprint is 
biometric signature). 

Regarding to claims 19, 23, Gottfried discloses a method of authorizing purchase 
transactions over a computer network using an account number that identifies a 
consumer's account from which funds will be withdrawn to pay a purchase price an 
authorization token associated with the account number which, when used with the 
account number, enables withdraw of funds from the account, the method comprising 
the steps: 

receiving at a third party contractor location the account number electronically 
transmitted over the network from the on-line merchant location (column 8, lines 10-15, 
column 6, lines 16-20, the credit card company database server receives the 
information includes the credit card number from the store server ); 

determining at the third party contractor location an authentication token type 
associated with the account number (column 9, lines 7-1 1 , the credit card company data 
base sends a request to the user PC to request the fingerprint data related to the user 
making the purchase transaction; column 6, 16-20, credit card information include credit 
card number; column 7, lines 5-10, the credit card company data base store the 
fingerprint data associated with the credit card information, thus by requesting the 
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fingerprint data from the user, the credit card company data base determines that the 
user has a fingerprint data type associated with the credit card number); 

prompting a consumer at the consumer location to electronically transmit an 
authentication token in accordance with the determined authentication token type over 
network to the third party contractor location (column 9, lines 7-18, prompting the user 
PC to transmit the fingerprint data to the credit card company database); 

receiving at the third party contractor location the authentication token 
electronically transmitted over the network from the consumer location to (column 9, 
lines 14-17, the credit card company database receives the encrypted fingerprint data 
information from the user PC, the authentication token is defined as a symbol or 
evidence of authority, validity of identity, thus the fingerprint data information is 
equivalent to the authentication token); and 

verifying the validity of the account number and the authentication token at the 
third party contractor location, before authorizing the purchase to be made (column 9, 
lines 18-26, the credit card company database compares the fingerprint data received 
from the user PC with the data base in order to approves or deny the transaction). 

Regarding to claim 21 , Gottfried discloses the second computer is further 
configured to notify the first computer whether the purchase is authorized (column 9, 
lines 22-25). 

Regarding to claims 25, 31, Gottfried discloses a system authorizing purchase 
transactions over a computer network using an account number that identifies a 
consumer's account from which funds will be withdrawn to pay a purchase price an 
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authorization token associated with the account number which, when used with the 
account number, enables withdraw of funds from the account, the system comprising: 

a computer connected to the network (figure 6, item 54, credit card company data 
base server connected to the Internet); 

the computer being configured to receive the account number transmitted over 
network from an on-line merchant's computer (column 8, lines 10-15, column 6, lines 
16-20, the credit card company database server receives the information includes the 
credit card number from the store server ), determine an authentication token type 
associated with the account number (column 9, lines 7-1 1 , the credit card company data 
base sends a request to the user PC to request the fingerprint data related to the user 
making the purchase transaction; column 6, 16-20, credit card information include credit 
card number; column 7, lines 5-10, the credit card company data base store the 
fingerprint data associated with the credit card information, thus by requesting the 
fingerprint data from the user, the credit card company data base determines that the 
user has a fingerprint data type associated with the credit card number), prompt a 
consumer's computer to transmit an authentication token to the computer in accordance 
with the authentication token type (column 9, lines 7-18, prompting the user PC to 
transmit the fingerprint data to the credit card company database) , receive the 
authentication token transmitted over the network from the consumer's computer 
(column 9, lines 14-17, the credit card company database receives the encrypted 
fingerprint data information from the user PC, the authentication token is defined as a 
symbol or evidence of authority, validity of identity, thus the fingerprint data information 
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is equivalent to the authentication token) , and verify the validity of the account number 
and the authentication token (column 9, lines 18-26, the credit card company database 
compares the fingerprint data received from the user PC with the data base in order to 
approves or deny the transaction). 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 5, 7, 9, 16, 18, 20, 27, 29, 33, 35, and 37 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Gottfried, U.S. Patent No. 6,270,011. 

Regarding to claims 5, 16, 33, Gottfried does not teach the number is 
electronically transmitted from the on-line merchant location to the third party contractor 
location over a private computer network. However, communicating between credit card 
company and merchant for verifying the credit card information submitted by the 
consumer using a private computer network is well known in the art. Therefore, it would 
have been obvious to one with ordinary skill in the art at the time the invention was 
made to include the feature above with Gottfried's for the purpose of improving the 
security. 

Regarding to claims 7, 9, 18, 20, 27, 29, 35, 37, Gottfried does not teach 
determining at third party contractor location whether account has sufficient funds to 
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cover purchase price and transmitting a signal from third party contractor location to on- 
line merchant location indicating whether there are sufficient funds in account to cover 
purchase price. However, it is well known in the art for the credit card issuer to check 
the funds against the consumer's credit card account every time the consumer uses the 
credit card to purchase a product from a merchant, and transmits a signal to the 
merchant whether to approve or reject the transaction. Therefore, it would have been 
obvious to one with ordinary skill in the art at the time the invention was made to include 
the feature above with Gottfried's in order to ensure the consumer's account has 
enough funds to cover the purchase price. 

Conclusion 

8. Claims 1-38 are rejected. 

9. The prior arts made of record and not relied upon is considered pertinent to 
applicant's disclosure: 

Blonder et al (US 5,708,422) discloses an automated method for transaction 
authorization and alert. 

Keathley et al (US 6,247,129) discloses a secure electronic commerce employing 
integrated circuit cards. 

Talati et al (US 5,903,878) discloses method and apparatus for electronic 
commerce. 

10. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to examiner Nga B. Nguyen whose telephone number is 
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(703) 306-2901. The examiner can normally be reached on Monday-Thursday from 
9:00AM-6:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hyung S. Sough can be reached on (703) 308-0505. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Group receptionist whose telephone number is 
(703) 306-1113. 

1 1 . Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
C/o Technology Center 3600 
Washington, DC 20231 

Or faxed to: 

(703) 305-7687 (for formal communication intended for entry), 

or 

(703) 308-3691 (for informal or draft communication, please label 
"PROPOSED" or "DRAFT"). 

Hand-delivered responses should be brought to Crystal Park 5, 2451 Crystal 
Drive, Arlington, VA, Seventh Floor (Receptionist). 
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